You Are Here:

United Kingdom Home > SSL Certificates > Buy SSL Certificates > Free SSL Trial Certificate > Test Root CA Instructions

Free Trial SSL Certificate

Install Trial Root CA

In order to test the use of a trial certificate, you must install a special Test CA Root on each browser that you will be using in the test. (This requirement is to prevent fraudulent use of test certificates. Please note that when you purchase a VeriSign SSL Certificate, your users will not have to go through this step).

Use of Test Certificates and the Test CA is governed by VeriSign's Test CPS. You must agree to be bound by all of its terms and conditions before using the Test Digital ID or downloading the Test CA Certificate. VeriSign Test Certification Authority Certification Practice Statement YOU MUST READ THIS VERISIGN TEST CERTIFICATION AUTHORITY PRACTICE STATEMENT (‘TEST CPS’) CAREFULLY. BY CLICKING ON ‘ACCEPT’ BELOW AND/OR REQUESTING, USING, OR RELYING UPON A TEST CERTIFICATE OR THE TEST CA ROOT CERTIFICATE (AS THESE TERMS ARE DEFINED BELOW), YOU AGREE TO BE BOUND BY THE TERMS OF THIS TEST CPS, AND TO BECOME A PARTY TO THIS TEST CPS. IF YOU DO NOT AGREE TO THE TERMS OF THIS TEST CPS, YOU MUST NOT REQUEST, USE, OR RELY UPON A TEST CERTIFICATE, THE TEST CA ROOT CERTIFICATE OR ANY COMPONENT THEREOF. ALL REFERENCES TO ‘VERISIGN’ IN THIS TEST CPS SHALL BE UNDERSTOOD AS REFERENCES TO THE LEGAL ENTITY SPECIFIED ON THE HOME PAGE OF THE WEB SITE ON WHICH YOU APPLIED FOR YOUR CERTIFICATE. This Test CPS sets forth certain terms and conditions under which VeriSign's Test Certification Authority (‘Test CA’) issues and manages test server certificates (‘Test Server Certificates’) and test Managed PKI end-user certificates (‘Test Subscriber Certificates’) (collectively, ‘Test Certificates’) (formerly known as OnSite Test Certificates) and under which the certificate for the test CA (‘Test CA Root Certificate’) and Test Certificates are used. A person or organisation which is the subject of, and has been issued a Test Certificate, and is capable of using, and is authorised to use, the private key corresponding to the public key listed in the Test Certificate is a subscriber (‘Subscriber’). A Test Server Certificate enables a Subscriber to simulate the operation of a Web site that provides certain security services when a server certificate is properly used. A Test Server Certificate enables a Subscriber to use the Test Server Certificate to test the functionality of server certificates in his/her application. A Subscriber using a Test Subscriber Certificate may either (i) act as an Managed PKI administrator and approve Test Subscriber Certificate applications and otherwise perform Managed PKI administrator functions; or (ii) test the functionality of client certificates in his/her application. VeriSign makes the Test CA Root Certificate available on its Web site for authorised test purposes only in accordance with this Test CPS. A person downloading and/or using the Test CA Root Certificate (‘User’), including but not limited to employees or other representatives of the Subscriber, can simulate the process by which a browser authenticates and establishes a secure channel to a Web site that properly uses a server certificate. This Test CPS is intended to legally bind and provide notice to Subscribers and other Users. In consideration of the promises in this Test CPS and intending to be legally bound, VeriSign, Subscribers and Users (‘Party’ or ‘Parties’ hereunder) agree as follows: 1. USE LIMITED TO AUTHORISED TESTING PURPOSES. TEST CERTIFICATES AND THE TEST CA ROOT CERTIFICATE SHALL BE USED EXCLUSIVELY FOR TEST PURPOSES. TEST CERTIFICATES, THE TEST CA ROOT CERTIFICATES AND ALL COMPONENTS THEREOF SHALL NOT BE USED OR RELIED UPON FOR ANY OTHER PURPOSES, INCLUDING COMMERCIAL TRANSACTIONS, AUTHENTICATING THE IDENTITY OF A SUBSCRIBER OR THE TEST CA, OR IN CONNECTION WITH ENSURING THE CONFIDENTIALITY OF ANY INFORMATION. DO NOT REQUEST OR USE A TEST CERTIFICATE OR THE TEST CA ROOT CERTIFICATE FOR ANY PURPOSE OTHER THAN FOR AUTHORISED TECHNICAL TESTING. SUBSCRIBERS AND USERS ACKNOWLEDGE THAT NEITHER THE IDENTITY NOR AUTHORITY OF SUBSCRIBERS HAS BEEN AUTHENTICATED OR APPROVED BY THE TEST CA OR VERISIGN. 2. Issuance and Use. Upon VeriSign's receipt of a completed application for a Test Certificate, VeriSign shall issue a Test Certificate to a Subscriber. VeriSign shall also provide Subscriber and other Users with access to the Test CA Root Certificate. Test Certificates and the Test CA Root Certificate shall be used exclusively for authorised testing purposes in simulating the process by which (i) a browser authenticates and establishes a secure channel to a Web site that properly uses a server certificate (for Test Server Certificates); (ii) a Managed PKI Administrator approves Test Subscriber Certificate applications and otherwise performs Managed PKI administrator functions (for Test Subscriber Certificates) or (iii) a Subscriber tests the general functionality of client certificates (for Test Subscriber Certificates). 3. No Suspension or Revocation Services. Subscribers and Users acknowledge that VeriSign shall not be required to suspend or revoke Test Certificates at the request of the Subscriber. VeriSign shall be entitled at its sole discretion to revoke any or all Test Certificates. 4. Permission to Publish Information. VeriSign shall be entitled to publish and otherwise to disclose publicly any Test Certificate or any portion of the content of a certificate, in connection with VeriSign's dissemination of Test Certificate information within and outside of VeriSign's Test CA hierarchy. 5. DISCLAIMER OF WARRANTY. VERISIGN ISSUES TEST CERTIFICATES ‘AS IS’. VERISIGN DISCLAIMS ANY REPRESENTATIONS, WARRANTIES, GUARANTEES, TERMS OR CONDITIONS WHATSOEVER WITH RESPECT TO THE SERVICES PROVIDED BY VERISIGN HEREUNDER, INCLUDING WITHOUT LIMITATION ANY AND ALL IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. VERISIGN MAKES NO REPRESENTATION, WARRANTY OR GUARANTEE TO ANY PERSON THAT ANY SUBSCRIBER TO WHICH IT HAS ISSUED A TEST CERTIFICATE IS IN FACT THE PERSON OR ORGANISATION IT CLAIMS TO BE IN INFORMATION SUPPLIED TO VERISIGN, OR THAT ANY PERSON OR ORGANISATION IS IN FACT THE PERSON OR ORGANISATION LISTED IN A TEST CERTIFICATE OR THE TEST CA ROOT CERTIFICATE. VERISIGN MAKES NO ASSURANCES OF THE ACCURACY, AUTHENTICITY, INTEGRITY OR RELIABILITY OF INFORMATION CONTAINED IN TEST CERTIFICATES OR THE TEST CA ROOT CERTIFICATE, OR OF THE RESULTS OF CRYPTOGRAPHIC METHODS IMPLEMENTED IN CONNECTION WITH SUCH CERTIFICATES. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY VERISIGN OR ITS EMPLOYEES OR REPRESENTATIVES SHALL CREATE A REPRESENTATION, WARRANTY OR GUARANTEE, OR IN ANY WAY INCREASE THE SCOPE OF VERISIGN'S OBLIGATIONS. TO THE EXTENT JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN REPRESENTATIONS, WARRANTIES OR GUARANTEES, SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU. 6. LIMITATION OF LIABILITY. NO PARTY SHALL BE LIABLE TO ANY OTHER PERSON FOR ANY CONSEQUENTIAL, INDIRECT, SPECIAL OR INCIDENTAL DAMAGES, EVEN IF SUCH OTHER PERSON HAS BEEN ADVISED OF THE LIKELIHOOD OF SUCH DAMAGES. SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE LIMITATION OR EXCLUSION OF LIABILITY IN THIS TEST CPS MAY NOT APPLY TO YOU. 7. Certificate Expiry. The validity period for a Test Certificate is set forth in the table below. VeriSign shall be entitled to revoke a Test Certificate and terminate its obligations to a Subscriber under this Test CPS within its sole discretion at any time, with or without cause. Type of Test Certificate Validity Period Test Server Certificates 2 weeks from the date of certificate issuance TestDrive S/MIME and VPN certificates Configurable by an administrator up to a maximum of 2 months from the date of certificate issuance Pilot Server Certificates 1 year from the date of certificate issuance unless otherwise agreed with the Pilot account Subscriber Pilot Client Certificates Configurable by an administrator up to a maximum of 1 year from the date of certificate issuance unless otherwise agreed with the Pilot account Subscriber 8. After Expiry or Revocation. Upon expiry or revocation for any reason, a Subscriber's Test Certificate and all components thereof shall not be used or relied upon for any reason. Such expiry or revocation shall not affect Sections 4, 5, 6, 8 and 9 of this Test CPS and all subsections of the foregoing, which shall continue in full force and effect to the extent necessary to permit the complete fulfilment thereof. Users shall delete the Test CA Root Certificate from their browsers upon completion of testing. 9. Miscellaneous Provisions. 9.1 Governing Laws. The laws of the State of California in the United States of America (irrespective of its choice of law principles) shall govern the validity of this Test CPS, the construction of its terms, and the interpretation and enforcement of the rights and duties of the Parties hereto. The parties agree that the United Nations Convention on Contracts for the International Sale of Goods shall not apply to this Test CPS. 9.2 Successors and Assigns. Except as otherwise provided herein, this Test CPS shall be binding upon, and inure to the benefit of, the respective successors, executors, heirs, representatives, administrators and assigns of the Parties. Neither this Test CPS nor Subscriber's Test Certificate shall be assignable by Subscriber. Any such attempted assignment or delegation shall be void and of no effect. 9.3 Severability. If any provision of this Test CPS, or the application thereof, shall for any reason and to any extent be invalid or unenforceable, the remainder of this Test CPS and application of such provision to other persons or circumstances shall not be affected thereby and shall be interpreted so as best to reasonably effect the intent of the Parties. IT IS EXPRESSLY UNDERSTOOD THAT EACH AND EVERY PROVISION OF THIS TEST CPS WHICH PROVIDES FOR ANY LIMITATION, DISCLAIMER OR EXCLUSION OF LIABILITY, WARRANTIES OR DAMAGES IS INTENDED BY THE PARTIES TO BE SEVERABLE AND INDEPENDENT OF ANY OTHER PROVISION AND TO BE ENFORCED AS SUCH. 9.4 Entire Agreement. This Test CPS constitutes the entire understanding and agreement of the Parties hereto with respect to the subject matter hereof and supersedes all prior and contemporaneous oral and written agreements or understandings among the Parties. 9.5 Notices. Whenever Subscriber or User desires or is required to give any notice, demand or request to VeriSign with respect to this Test CPS, each such communication shall be in writing and shall be effective only if it is delivered by a courier service which confirms delivery in writing or is posted, certified or registered mail, postage prepaid, return receipt requested, addressed to the ‘Contact’ address listed on the Web site from which you purchased your Test Certificate, with a copy to: General Counsel, VeriSign, Inc., 487 East Middlefield Road, Mountain View, California, USA 94043. References to telephone numbers above shall mean 1-650-426-3400. Such communications shall be effective when they are received. 9.6 Trademarks and Trade Names. By reason of this Test CPS or the performance hereof, Subscriber and VeriSign shall acquire no rights of any kind in any trademark, brand name, logo or product designation of the other Party and shall not make any use of the same for any reason except as otherwise authorised in writing by the Party which owns all rights to such trademarks, trade names, logos or product designation. VeriSign Test Certification Authority Certification Practice Statement Version 4.0 Click the ACCEPT button to install the Test CA Root

For Microsoft Browsers

1. Click on Accept at the top of this page.
2. A dialogue box will appear that says "You have chosen to download a file from this location: getcacert from digitalid.verisign.com" Click the option that says "Save this file to Disk." Click OK.
3. Select the location of the file. Leave default name and file type.
4. A prompt will appear: Download Complete, click Close.
5. Open IE 5.0 Browser.
6. Go to Tools/Internet Options/Content/Certificates (trusted root authorities tab)/ Import.
7. Certificate Manager Import Wizard: click Next.
8. Browse to the location of the recently stored root (done in step 3). Select ALL files for file type.
9. Select "getcacert" and click Open.
10. Click Next.
11. Select "place all certificates in the following store.”
12. Highlight "Trusted Root Certification Authorities" and click OK.
13. Click Next.
14. Click Finish.
15. When prompted and asked if you wish to add the following certificate to the root store, click Yes.
16. To verify the installation of the "Intermediate Root CA,” go to: 
    Tools/Internet Options/Content/Certificates (trusted root authorities tab) It should say "For VeriSign Authorised Testing Only.”

For Netscape Browsers

1. Click on Accept at the top of this page.
2. A dialogue box will appear that says, "You are about to go through the process of accepting a Certificate Authority. This has serious implications on the security of future encryptions using Netscape. This assistant will help you decide whether or not you wish to accept this Certificate Authority." Click Next.
3. A dialogue box appears that says, "A Certificate Authority certifies the identity of sites on the Internet. By accepting this Certificate Authority…" Click Next.
4. A dialogue box appears that says, “Here is the certificate for this Certificate Authority. Examine it carefully…" Click Next.
5. A dialogue box appears that says, "Are you willing to accept this Certificate Authority for the purposes of certifying other Internet sites, email users or software developers?" Check "Accept this Certificate Authority for Certifying Network Sites." Click Next.
6. Do not check anything on the next dialogue box. Click Next.
7. Another dialogue box will appear asking you to enter a nickname. Enter something like "VeriSign Test CA". Click Finish.
8. Repeat this process for every browser that you will use in your testing.